       (when response
         (assoc-in response [:headers "X-Frame-Options"] "DENY")))))
 
-(schema/defn wrap-with-certificate-cn :- IFn
+(schema/defn ^:always-validate wrap-with-certificate-cn :- IFn
   "Ring middleware that will annotate the request with an
   :ssl-client-cn key representing the CN contained in the client
   certificate of the request. If no client certificate is present,

          (assoc-in response [:headers "cache-control"] "private, max-age=0, no-cache")
          response)))))

(schema/defn wrap-add-x-frame-options-deny :- IFn
  "Adds 'X-Frame-Options: DENY' headers to requests if they are handled by the handler"
  [handler :- IFn]
  (fn [request]

;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
;;;; Middleware

(schema/defn ^:always-validate wrap-request-logging :- IFn
  "A ring middleware that logs the request."
  [handler :- IFn]
  (fn [{:keys [request-method uri] :as req}]
